When a Bitcoin Purchase Starts at the Central Bank
A Brazilian buying bitcoin this October can pay by Pix, the central bank's instant transfer system, and the exchange receiving the money now needs that bank's licence. Local payment systems in India, Kenya and Europe look set to become crypto's main door at home, largely because they tend to beat cards on cost and speed.
Regulators have noticed. Whoever runs the rail increasingly decides who gets in, and on the evidence so far most buyers come out ahead. The same arrangement hands national authorities a switch crypto was meant to make unnecessary.
1. Pix and UPI Take On the Card
Scale probably explains most of the shift. Pix had 174 million individual users by March, about four in five Brazilians. India's UPI cleared 228.3 billion transactions in 2025, and both systems kept growing at double-digit rates long after the novelty wore off.
Any exchange that wants Brazilian customers more or less has to meet them on Pix. Payments from people to businesses accounted for 46% of Pix transfers in March, so paying an exchange looks like any other checkout.
In practice, a buyer scans the exchange's QR code from a banking app, and the reais usually arrive before the page refreshes. Cost points the same way. Pix is generally free for individuals sending money, and India's Finance Ministry said in August that UPI payments will remain free for consumers.
Cards carried the first wave of buyers, and for anyone in a country without a fast domestic rail they're still the quickest way in. Their weakness is structural. A card payment can be disputed weeks after the fact, while a crypto transfer can't be recalled once it settles, so processors tend to price that mismatch into card purchases.
A transfer pushed from the buyer's own banking app sidesteps most of that. The bank has already checked who the customer is, and the exchange usually carries less risk of a clawback it can't cover.
For product teams, the sensible order is to map the dominant domestic rail in each launch market before negotiating card processing, and to track disputes by payment method from the first day. A rail that brings half the deposits and almost none of the chargebacks deserves the prominent spot at checkout.
Anyone hunting for the best place to buy crypto used to weigh spreads and coin lists, and those still count. The sharper test in 2026 is whether a platform takes both the card in a buyer's wallet and the transfer method already on their phone. Licensing matters just as much, and Brazil is about to show why.
2. A Licence Gate in Brazil
Brazil's central bank turned the licence into a gate this year. Its three resolutions on crypto service providers took effect in February. Brokers, custodians and other intermediaries now need its authorisation to operate, and many crypto purchases fall under foreign exchange rules.
The bar is set high. Firms have to file for authorisation by 30 October with an independent assurance report attached, and minimum capital runs from R10.8milliontoR37.2 million depending on the licence. Plenty of smaller operators may struggle to clear it.
Firms that miss the filing can't keep operating while they wait. From 6 November, authorised banks and payment institutions face limits on dealing with crypto providers that lack authorisation, with some exceptions written into the rules.
The November rule carries the weight. Pix runs through regulated banks and payment institutions, so once those firms are restricted from serving an unauthorised exchange, the licence becomes the price of reaching the way most Brazilians pay.
It's a blunt instrument, but probably a fair one. A buyer whose deposit lands at an authorised firm has a regulator to call when something goes wrong, which is more than customers of many offshore exchanges have had.
Compliance teams at exchanges and fintechs serving Brazil face a tight run of dates. Monthly reports on crypto trades that count as foreign exchange are due to start on 3 November. Payment partners will likely want proof of authorisation, or of a timely filing, well before the 6 November limits bite.
A Brazilian exchange that can't show it filed for authorisation by the end of October is asking customers to trust a firm their own banks may soon have to keep at arm's length.
3. Digital Dollars Over Pix
What Brazilians buy over Pix is often not bitcoin at all. Gabriel Galípolo, the central bank's governor, said in early 2025 that about 90% of the country's crypto flow was tied to stablecoins, tokens pegged to a currency such as the US dollar.
A saver in São Paulo can send reais to an exchange by Pix and walk away holding a dollar token, without ever opening a foreign currency account.
The pattern tends to repeat wherever a local currency loses value fast. Stablecoin use has climbed sharply in high-inflation economies, where savers want dollars they can't easily get from a bank. Because central banks understand that arithmetic better than anyone, Brazil now treats many stablecoin purchases as foreign exchange. This month, under the central bank's Resolution 561, licensed international payment providers also lost the right to use crypto to settle what Brazilian customers send abroad. Buying digital dollars over Pix is still allowed.
Withdrawing those dollar tokens to a wallet the buyer controls is allowed too, though since 1 October any such transfer of US$10,000 or more has to be reported to Coaf, Brazil's financial intelligence unit.
Finance teams that used stablecoins to pay foreign suppliers through a Brazilian payment provider now need a conventional currency route for those payments. From January, providers may also hold certain outbound crypto transfers to foreign platforms or self-custody wallets for up to 24 hours, so treasury calendars should allow for the delay.
4. India's Off Switch
India shows the other side of the same power. When Coinbase launched there in 2022 it accepted UPI, and it suspended the option within three days after the National Payments Corporation of India, which runs the system, issued a public statement.
Local exchanges such as WazirX and CoinSwitch blocked UPI deposits in the same weeks, after the operator said it wasn't aware of any crypto exchange using the system. Brian Armstrong, Coinbase's chief executive, later blamed informal pressure from the Reserve Bank of India. No law had changed.
After registering with India's Financial Intelligence Unit, Coinbase came back last December. Since June it has taken rupee deposits over IMPS, an older bank transfer system, rather than UPI, which should reduce the need for peer-to-peer middlemen.
The tax bill hasn't moved either. India's Budget 2026 kept the 30% tax on crypto gains, along with the rule that crypto losses can't be set against a salary or rental income. Each sale also has 1% withheld as tax deducted at source.
Coinbase is back, but through a side entrance, because UPI, the system roughly 400 million Indians use for payments as small as a grocery bill, still isn't the way rupees reach it.
Platforms serving India would be wise to treat any single rail as a concentration risk. If a rail freezes again, a second bank-transfer route that's already live costs far less than rebuilding deposits from scratch. Tax reporting deserves the same attention, since the budget proposed fines of Rs 200 a day for late transaction statements from exchanges.
5. Mobile Money Meets a Crypto Rulebook
Across much of Africa, the everyday rail lives on a phone, and the sums moving through it stopped being small change a while ago. The GSMA's latest industry count shows mobile money services handled more than $2 trillion in 2025, which was 23% more than in 2024.
Kenya, where tens of millions move money through Safaricom's M-Pesa, chose to write rules for the crypto end of that pipe rather than look away.
Lawmakers passed the Virtual Asset Service Providers Act in October 2025. Firms already in business got exactly a year from the day it took effect, so under Kenya's new crypto licensing regulations their deadline is 4 November.
So far, the informal route has been a common one. A buyer sends shillings over M-Pesa to a seller found on a peer-to-peer board, then hopes the coins arrive before that seller stops answering messages.
Licensing is meant to replace that gamble with firms a regulator can actually sanction. Payment processing is one of ten activities that now need a licence.
Kenya split the job between two regulators. The central bank oversees payment-related crypto activity while the Capital Markets Authority handles the investment side, which should leave the link between a mobile wallet and a crypto platform with the payments regulator.
That looks like the right call. A wallet that holds a stallholder's takings ought to be watched by people who think about payments all day. Stablecoin issuers answer to the central bank as well and need KSh 300 million in paid-up capital.
Operators have about three weeks to map each product line to the right regulator. An app that lets users top up from a mobile wallet and also offers trading may need a licence from each, and the application should make plain which activity sits where.
6. Europe Built the Rail First
Europe built the rail before the licence. Under the EU's Instant Payments Regulation, every euro-area payment provider that offers ordinary bank transfers has had to send instant ones since 9 October last year, at no higher price. The same deadline brought a free check that the payee's name matches the account.
For a buyer in Lisbon or Lyon, a transfer to an exchange can now land in seconds rather than the next working day. Choosing between a card and a bank transfer largely stops being a trade-off between speed and cost.
The name check is aimed squarely at payment scams. If a fake site poses as a real exchange but collects money into an account held under another name, the buyer's bank now flags the mismatch before anything moves.
That cuts both ways for exchanges. Each check returns a match, a close match or a no-match, and a buyer who sees a warning at the moment of payment may simply abandon the deposit. Exchanges whose collection accounts sit under a legal name customers don't recognise should fix that before the warnings start costing them deposits.
The licence came this summer. Since July, when the last national grace periods expired, any crypto firm serving EU customers has needed authorisation under Regulation (EU) 2023/1114, better known as MiCA. Firms do get something back for the paperwork, because one licence can be passported to every other member state.
Brussels chose a single rulebook, and other governments are taking very different lines on stablecoins. For buyers, the European pairing of instant rails and one licence is arguably about as tidy as crypto access gets.
7. Exits for Tourists and Remittance Corridors
Smallest of the seven, the last shift points the other way, with the local rail serving as the exit. Thailand announced a crypto-to-baht sandbox for foreign tourists in August last year.
A visitor sells digital assets through a licensed Thai operator, and the baht goes into an e-money wallet that participating shops accept. It targets tourists whose home payment apps don't link to Thailand's QR system.
Spending is capped at 50,000 baht a month with small vendors and 500,000 with vetted ones, and the crypto itself still can't be handed to a shopkeeper. The local rail does the paying, inside a trial the securities regulator can run for up to 18 months.
Rails are also starting to connect across borders. This August, Qatar Post began letting customers send money straight to a UPI-linked bank account in India from its outlets. Each transfer carries a flat fee, and the cap sits at the equivalent of ₹1 lakh. None of it touches crypto, for now.
Who Holds the Switch Now
Crypto was sold as money nobody could switch off. In 2026 its busiest doors run through national payment systems, and India has already shown how quickly one can close to crypto without a single law changing.
The rails themselves aren't the problem. Anyone who has sent money to a stranger on a peer-to-peer board and then waited for the coins knows why a licensed exchange on a national rail feels safer. If that exchange lets a customer down, there's also a regulator to complain to.
So before the next deposit, look the platform up on your own regulator's register. It also pays to keep a second way of moving money ready, in case the first one closes.
Teams building on these rails should put the same two checks on their launch list, along with a written plan for customer funds if a payment partner walks away.
In return for using those doors, buyers got speed and a regulator to call. How many noticed that the switch came with the deal?
